Debian/ceph: high 7.2
An authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles CEPHX_GET_AUTH_SESSION_KEY requests, it doesn't sanitize other_keys, allowing key reuse. An attacker who c
Action: Upgrade ceph to 14.2.20-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 14.2.20-1 | - |
Fixed versions
| 14.2.20-1 |
Sources
- osv: DEBIAN-CVE-2021-20288#Debian:14/ceph
- https://security-tracker.debian.org/tracker/CVE-2021-20288
published · modified · JSON